Solana‑based Drift Protocol’s $270m exploit has become a live test of how Circle, DeFi builders and lawmakers share responsibility when stablecoins sit at the center of a hack.
Summary
- Drift Protocol lost roughly $270 million in a governance exploit, one of 2026’s largest DeFi hacks.
- Circle’s Dante Disparte said USDC freezes only occur under legal orders, rejecting calls for unilateral intervention.
- Disparte urged lawmakers to fast‑track the GENIUS Act and CLARITY Act and pushed DeFi to adopt on‑chain “circuit breaker” controls.
Circle’s chief strategy officer Dante Disparte has responded to the roughly $270 million exploit on Solana‑based Drift Protocol by defending how USDC is governed while demanding tougher legal and technical safeguards for DeFi. The April 1 attack saw an attacker seize Drift’s governance keys, drain an estimated $270‑$285 million in assets, rapidly swap much of the haul into USD Coin (USDC) and bridge over $230 million to Ethereum via Circle’s own Cross‑Chain Transfer Protocol. Investigators such as on‑chain analyst ZachXBT argued Circle had “roughly six hours” to freeze the stolen USDC but “took no action,” intensifying scrutiny on how centralized issuers respond in live attacks.
Responding in an X statement and subsequent commentary, Disparte stressed that Circle cannot and will not freeze USDC on mere social‑media pressure or unilateral discretion. “USDC freezing is only executed under legal mandate — not unilaterally,” he said, framing the policy as a matter of due process and financial privacy rather than operational convenience. He added that “it is indefensible and untenable that tools and software are co‑opted by bad actors who remain unchecked,” but argued that unchecked intervention by issuers would be just as dangerous for legitimate users.
Disparte used the Drift exploit to press U.S. lawmakers to accelerate the stablecoin‑focused GENIUS Act and the broader market‑structure CLARITY Act, saying both are needed “before the next major security incident.” He has previously called the GENIUS Act “the most significant US law for innovation since the 1990s,” arguing it “enshrines Circle’s way of doing business into law” by requiring full‑reserve backing, monthly disclosures and robust supervision for dollar stablecoin issuers. The CLARITY Act, currently moving through Congress, would extend that framework to trading venues and intermediaries, creating a clearer basis for when and how assets like USDC can be frozen or clawed back after hacks.
Beyond Washington, Disparte is now urging DeFi teams to import safeguards long standard in traditional markets. He called on protocols to deploy on‑chain “circuit breaker mechanisms” that can automatically halt trading or withdrawals under abnormal conditions, arguing that “risk controls, not improvisation on X, should decide how a $270 million exploit plays out.” With Drift still assessing losses across USDC, BTC, SOL and other assets, the incident has become a live‑fire test of whether stablecoin issuers, protocols and regulators can share responsibility without turning permissionless finance into a de facto banked system.